skills/melvynx/ai-maxxing-skills/setup-lumail/Socket

setup-lumail

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and Lumail-focused capabilities mostly align, and the auth flow appears first-party, but it relies on repeated unpinned `npx @latest` execution plus mutable raw GitHub fetches and transitive skill loading. This is more consistent with a risky but plausibly legitimate setup skill than confirmed malware.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Oct 21, 2026, 02:50 AM

Package URL

pkg:socket/skills-sh/melvynx%2Fai-maxxing-skills%2Fsetup-lumail%2F@9166058a89ee67c4b8f409ef68c803970efd8698f186e342794d2e581cdcc8fa